Adapted cookie, origin, URL validation and secret handling from MikaelKW/nodecast-tv-plus. Protect API roles, revoke logins across restart, preserve existing accounts, and isolate transcode sessions by account.
Co-authored-by: Mikael <mikaelkwessel@gmail.com>
- Fix back button redirecting to login page when authenticated
- Add browser history management for SPA navigation between sections
- Use window.location.replace() to prevent login page in history
- Add URL hash support for bookmarkable sections
